Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9ab7645-0c88-3713-a1f9-3a12b0e73990.roa
File:                     c9ab7645-0c88-3713-a1f9-3a12b0e73990.roa (raw, json)
Hash identifier:          b25P/siIK2zRvl5rHS0u5amSz7GBwZVtJ6bIdoc2AYI=
Subject key identifier:   94:C0:06:61:91:60:2A:39:4D:1C:E9:1D:DC:D3:C3:84:A9:47:7B:F2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A05FAF366D4D8DD0B67600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9ab7645-0c88-3713-a1f9-3a12b0e73990.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:5f:af:36:6d:4d:8d:d0:b6:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7444cdce-ca87-4f73-9046-1b5627ad75e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:73:0c:93:08:7f:c6:a5:0f:e0:4c:bf:e0:
                    7b:e3:a5:bd:ba:27:28:da:1e:a2:02:37:a5:15:ef:
                    40:d8:cd:ee:02:7b:c3:27:fb:91:8b:11:f6:2f:c6:
                    ec:c1:10:35:b8:64:bc:35:61:2a:06:3a:fd:85:55:
                    7a:09:48:65:81:87:db:f8:9c:3a:78:0e:25:13:1b:
                    a2:8b:34:28:14:58:57:4f:69:d1:bc:64:ba:9f:d6:
                    5b:cd:52:d0:98:2f:98:34:17:96:d4:47:ff:f2:73:
                    89:5f:00:2a:ea:e5:d4:56:b8:6a:41:72:7b:12:01:
                    39:09:48:b9:53:c4:56:b5:21:14:53:82:36:d6:56:
                    9f:b0:07:8f:b2:d0:de:82:c3:de:12:d7:e4:9b:6e:
                    c4:96:75:95:0a:24:c9:96:5d:fd:b4:a9:71:f3:28:
                    81:23:03:47:e2:8e:1c:a0:90:6c:ed:ab:94:52:b7:
                    8c:b4:fd:00:58:95:e2:d4:ac:60:85:7e:4a:ce:59:
                    5e:14:26:50:df:21:f8:54:58:96:3b:6b:49:43:7d:
                    1e:5d:2c:c7:91:94:bf:e0:7f:a0:ae:c8:01:f1:c2:
                    47:fa:11:6e:29:24:6d:90:a4:cb:3a:e3:a2:c5:71:
                    8f:4a:19:2d:b3:08:e7:8e:29:37:8f:74:10:d5:c1:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C0:06:61:91:60:2A:39:4D:1C:E9:1D:DC:D3:C3:84:A9:47:7B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9ab7645-0c88-3713-a1f9-3a12b0e73990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a6:f7:67:b9:51:4d:cb:1d:b2:5b:5b:c7:88:7f:65:66:a5:
         ec:2e:55:b7:fa:97:f5:c7:10:93:b5:80:7e:af:cb:f1:20:83:
         d0:56:b6:12:12:5f:18:b0:ff:5e:5b:32:88:9f:5c:21:de:a0:
         d4:03:55:f0:21:f2:96:70:fd:56:a1:64:d2:e7:53:c6:a0:51:
         d4:10:c9:a5:42:e5:14:3f:eb:2f:8b:7e:6c:4c:d1:31:fb:41:
         0a:59:28:50:c1:9a:d5:30:b9:6e:1a:13:2f:83:e7:97:da:61:
         bd:5d:7c:2b:7a:c1:c0:26:38:f1:94:b3:40:e0:1c:f3:06:73:
         29:ed:6b:91:6f:90:b1:c4:e9:6c:86:41:55:8e:1e:1f:f3:83:
         a5:a5:60:9e:1a:55:ea:e9:5c:6e:87:6a:1a:91:8a:64:2e:b4:
         40:17:cf:7d:22:a0:57:df:b1:20:4d:fe:e1:bd:aa:b5:9f:e1:
         16:c8:da:73:43:db:7f:1a:31:d6:4f:01:00:ab:18:4c:77:0d:
         db:9c:73:b8:aa:05:f4:67:e7:84:c8:be:c3:78:05:e4:6c:0b:
         18:eb:cb:84:17:fc:98:6a:3b:ef:e0:f9:48:4b:9d:d1:32:1f:
         fc:0c:35:d7:06:70:1b:45:6a:31:21:13:2c:7c:bf:35:7f:78:
         14:3d:f9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----